# ELSA-2025-20716: Security update for 19 packages ELSA-2025-20716, released October 14, 2025, fixes 30 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/elsa-2025-20716 - Platform: Linux - Released: Oct 14, 2025 - Priority: High (Closes CVE-2025-38439, high severity) - CVEs: 30, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://linux.oracle.com/errata/ELSA-2025-20716.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | ol 8 | 0:5.15.0-313.189.5.1.el9uek | | [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | ol 9 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek](https://patchblox.com/security/data/product/linux/kernel-uek.md) | ol 8 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek](https://patchblox.com/security/data/product/linux/kernel-uek.md) | ol 9 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek-container](https://patchblox.com/security/data/product/linux/kernel-uek-container.md) | ol 8 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek-container](https://patchblox.com/security/data/product/linux/kernel-uek-container.md) | ol 9 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek-container-debug](https://patchblox.com/security/data/product/linux/kernel-uek-container-debug.md) | ol 8 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek-container-debug](https://patchblox.com/security/data/product/linux/kernel-uek-container-debug.md) | ol 9 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek-core](https://patchblox.com/security/data/product/linux/kernel-uek-core.md) | ol 8 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek-core](https://patchblox.com/security/data/product/linux/kernel-uek-core.md) | ol 9 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek-debug](https://patchblox.com/security/data/product/linux/kernel-uek-debug.md) | ol 8 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek-debug](https://patchblox.com/security/data/product/linux/kernel-uek-debug.md) | ol 9 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek-debug-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-core.md) | ol 8 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek-debug-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-core.md) | ol 9 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek-debug-devel](https://patchblox.com/security/data/product/linux/kernel-uek-debug-devel.md) | ol 8 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek-debug-devel](https://patchblox.com/security/data/product/linux/kernel-uek-debug-devel.md) | ol 9 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek-debug-modules](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules.md) | ol 8 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek-debug-modules](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules.md) | ol 9 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra.md) | ol 8 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra.md) | ol 9 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek-devel](https://patchblox.com/security/data/product/linux/kernel-uek-devel.md) | ol 8 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek-devel](https://patchblox.com/security/data/product/linux/kernel-uek-devel.md) | ol 9 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek-doc](https://patchblox.com/security/data/product/linux/kernel-uek-doc.md) | ol 8 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek-doc](https://patchblox.com/security/data/product/linux/kernel-uek-doc.md) | ol 9 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek-modules](https://patchblox.com/security/data/product/linux/kernel-uek-modules.md) | ol 8 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek-modules](https://patchblox.com/security/data/product/linux/kernel-uek-modules.md) | ol 9 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra.md) | ol 8 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra.md) | ol 9 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek64k](https://patchblox.com/security/data/product/linux/kernel-uek64k.md) | ol 8 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek64k](https://patchblox.com/security/data/product/linux/kernel-uek64k.md) | ol 9 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek64k-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-core.md) | ol 8 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek64k-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-core.md) | ol 9 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek64k-devel](https://patchblox.com/security/data/product/linux/kernel-uek64k-devel.md) | ol 8 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek64k-devel](https://patchblox.com/security/data/product/linux/kernel-uek64k-devel.md) | ol 9 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek64k-modules](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules.md) | ol 8 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek64k-modules](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules.md) | ol 9 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra.md) | ol 8 | 0:5.15.0-313.189.5.1.el9uek | | [kernel-uek64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra.md) | ol 9 | 0:5.15.0-313.189.5.1.el9uek | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-38439](https://patchblox.com/security/data/cve/CVE-2025-38439.md) | High | bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT | 7.8 | 0.0058 | | | [CVE-2025-39866](https://patchblox.com/security/data/cve/CVE-2025-39866.md) | High | fs: writeback: fix use-after-free in __mark_inode_dirty() | 7.8 | 0.0031 | | | [CVE-2025-38236](https://patchblox.com/security/data/cve/CVE-2025-38236.md) | High | af_unix: Don't leave consecutive consumed OOB skbs. | 7.8 | 0.0030 | | | [CVE-2025-38466](https://patchblox.com/security/data/cve/CVE-2025-38466.md) | High | perf: Revert to requiring CAP_SYS_ADMIN for uprobes | 7.8 | 0.0023 | | | [CVE-2025-38464](https://patchblox.com/security/data/cve/CVE-2025-38464.md) | High | tipc: Fix use-after-free in tipc_conn_close(). | 7.8 | 0.0022 | | | [CVE-2025-38375](https://patchblox.com/security/data/cve/CVE-2025-38375.md) | High | virtio-net: ensure the received length does not exceed allocated size | 7.8 | 0.0021 | | | [CVE-2025-38459](https://patchblox.com/security/data/cve/CVE-2025-38459.md) | High | atm: clip: Fix infinite recursive call of clip_push(). | 7.8 | 0.0021 | | | [CVE-2025-38465](https://patchblox.com/security/data/cve/CVE-2025-38465.md) | High | netlink: Fix wraparounds of sk->sk_rmem_alloc. | 7.8 | 0.0020 | | | [CVE-2025-38445](https://patchblox.com/security/data/cve/CVE-2025-38445.md) | High | md/raid1: Fix stack memory use after return in raid1_reshape | 7.1 | 0.0020 | | | [CVE-2025-38457](https://patchblox.com/security/data/cve/CVE-2025-38457.md) | High | net/sched: Abort __tc_modify_qdisc if parent class does not exist | 7.1 | 0.0020 | | | [CVE-2025-38458](https://patchblox.com/security/data/cve/CVE-2025-38458.md) | High | atm: clip: Fix NULL pointer dereference in vcc_sendmsg() | 7.0 | 0.0020 | | | [CVE-2025-38443](https://patchblox.com/security/data/cve/CVE-2025-38443.md) | High | nbd: fix uaf in nbd_genl_connect() error path | 7.8 | 0.0018 | | | [CVE-2025-38569](https://patchblox.com/security/data/cve/CVE-2025-38569.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: benet: fix BUG when creating VFs benet crashes... | 7.0 | 0.0018 | | | [CVE-2025-38461](https://patchblox.com/security/data/cve/CVE-2025-38461.md) | High | vsock: Fix transport_* TOCTOU | 7.8 | 0.0014 | | | [CVE-2025-38462](https://patchblox.com/security/data/cve/CVE-2025-38462.md) | High | vsock: Fix transport_{g2h,h2g} TOCTOU | 7.0 | 0.0014 | | | [CVE-2025-38067](https://patchblox.com/security/data/cve/CVE-2025-38067.md) | Routine | rseq: Fix segfault on registration when rseq_cs is non-zero | 5.5 | 0.0058 | | | [CVE-2025-38165](https://patchblox.com/security/data/cve/CVE-2025-38165.md) | Routine | bpf, sockmap: Fix panic when calling skb_linearize | 5.5 | 0.0036 | | | [CVE-2022-48703](https://patchblox.com/security/data/cve/CVE-2022-48703.md) | Routine | kernel-64k-debug-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: b... | 5.5 | 0.0024 | | | [CVE-2025-38467](https://patchblox.com/security/data/cve/CVE-2025-38467.md) | Routine | drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling | 5.5 | 0.0020 | | | [CVE-2025-38460](https://patchblox.com/security/data/cve/CVE-2025-38460.md) | Routine | atm: clip: Fix potential null-ptr-deref in to_atmarpd(). | 5.5 | 0.0020 | | | [CVE-2025-38441](https://patchblox.com/security/data/cve/CVE-2025-38441.md) | Routine | kernel-debug-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system | 5.5 | 0.0019 | | | [CVE-2024-26775](https://patchblox.com/security/data/cve/CVE-2024-26775.md) | Routine | aoe: avoid potential deadlock at set_capacity | 5.5 | 0.0018 | | | [CVE-2025-38513](https://patchblox.com/security/data/cve/CVE-2025-38513.md) | Routine | wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev() | 5.5 | 0.0018 | | | [CVE-2025-38516](https://patchblox.com/security/data/cve/CVE-2025-38516.md) | Routine | pinctrl: qcom: msm: mark certain pins as invalid for interrupts | 5.5 | 0.0018 | | | [CVE-2025-38540](https://patchblox.com/security/data/cve/CVE-2025-38540.md) | Routine | HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras | 5.5 | 0.0018 | | | [CVE-2025-38546](https://patchblox.com/security/data/cve/CVE-2025-38546.md) | Routine | atm: clip: Fix memory leak of struct clip_vcc. | 5.5 | 0.0018 | | | [CVE-2025-38444](https://patchblox.com/security/data/cve/CVE-2025-38444.md) | Routine | raid10: cleanup memleak at raid10_make_request | 5.5 | 0.0018 | | | [CVE-2025-38727](https://patchblox.com/security/data/cve/CVE-2025-38727.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues wer... | 5.5 | 0.0018 | | | [CVE-2025-38515](https://patchblox.com/security/data/cve/CVE-2025-38515.md) | Routine | drm/sched: Increment job count before swapping tail spsc queue | 5.5 | 0.0017 | | | [CVE-2025-38448](https://patchblox.com/security/data/cve/CVE-2025-38448.md) | Routine | usb: gadget: u_serial: Fix race condition in TTY wakeup | 6.2 | 0.0014 | | --- Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.